CVE-2025-41240: Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) that is located within the web server document root. In…

PriorityP271critical10CVSS 3.1

AVNACLPRNUINSCCHIHAH

EPSS

0.70%

48.4th percentile

Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets by accessing specific URLs if the application is exposed externally. The issue affects deployments using the default value of usePasswordFiles=true, which mounts secrets as files into the container filesystem.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
vmware	bitnamicharts_appsmith	21.2.0 – 22.0.4	—
vmware	bitnamicharts_drupal	>= 5.2.0 < 6.0.19	6.0.19
vmware	bitnamicharts_wordpress	>= 24.2.0 < 25.0.4	25.0.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.